oval:org.mitre.oval:def:13529

Definition Id: oval:org.mitre.oval:def:13529

Oval ID:	oval:org.mitre.oval:def:13529
Title:	USN-990-2 -- apache2 vulnerability
Description:	USN-860-1 introduced a partial workaround to Apache that disabled client initiated TLS renegotiation in order to mitigate CVE-2009-3555. USN-990-1 introduced the new RFC5746 renegotiation extension in openssl, and completely resolves the issue. After updating openssl, an Apache server will allow both patched and unpatched web browsers to connect, but unpatched browsers will not be able to renegotiate. This update introduces the new SSLInsecureRenegotiation directive for Apache that may be used to re-enable insecure renegotiations with unpatched web browsers. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. This update adds backported support for the new RFC5746 renegotiation extension and will use it when both the client and the server support it.
Family:	unix	Class:	patch
Reference(s):	USN-990-2 CVE-2009-3555	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.04 Ubuntu 9.10 Ubuntu 6.06 Ubuntu 9.04	Product(s):	apache2
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section apache2-mpm-perchild DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-doc DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-src DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2 DPKG is earlier than 2.2.8-1ubuntu0.18 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section apache2-utils DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-mpm-worker DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2.2-common DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-mpm-prefork DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-threaded-dev DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-mpm-event DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-prefork-dev DPKG is earlier than 2.2.8-1ubuntu0.18 OR Release section Ubuntu 10.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND apache2-doc DPKG is earlier than 2.2.14-5ubuntu8.2 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section apache2.2-bin DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-utils DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-mpm-worker DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2.2-common DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-suexec-custom DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-suexec DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2 DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-mpm-prefork DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-threaded-dev DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-mpm-event DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-mpm-itk DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-prefork-dev DPKG is earlier than 2.2.14-5ubuntu8.2 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section apache2-doc DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-mpm-prefork DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-mpm-itk DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-mpm-worker DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-mpm-event DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2.2-common DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2 DPKG is earlier than 2.2.12-1ubuntu2.3 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section apache2.2-bin DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-utils DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-suexec-custom DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-suexec DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-threaded-dev DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-prefork-dev DPKG is earlier than 2.2.12-1ubuntu2.3 OR Release section Ubuntu 6.06 is installed AND Architecture section Architecture independet section Installed architecture is all AND apache2-doc DPKG is earlier than 2.0.55-4ubuntu2.11 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section libapr0 DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-utils DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-mpm-worker DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-mpm-perchild DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-common DPKG is earlier than 2.0.55-4ubuntu2.11 AND libapr0-dev DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2 DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-threaded-dev DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-mpm-prefork DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-prefork-dev DPKG is earlier than 2.0.55-4ubuntu2.11 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section apache2-doc DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-src DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2 DPKG is earlier than 2.2.11-2ubuntu2.7 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section apache2-utils DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-mpm-worker DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2.2-common DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-suexec-custom DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-suexec DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-mpm-prefork DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-threaded-dev DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-mpm-event DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-prefork-dev DPKG is earlier than 2.2.11-2ubuntu2.7

Definition Id: oval:org.mitre.oval:def:13089

Oval ID:	oval:org.mitre.oval:def:13089
Title:	Ubuntu 10.04 is installed
Description:	Ubuntu 10.04 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:canonical:ubuntu_linux:10.04	Version:	5
Platform(s):	Ubuntu 10.04	Product(s):
Definition Synopsis:
Ubuntu 10.04 is installed
Referenced By:
oval:org.mitre.oval:def:13529

Definition Id: oval:org.mitre.oval:def:13079

Oval ID:	oval:org.mitre.oval:def:13079
Title:	Ubuntu 9.10 is installed
Description:	Ubuntu 9.10 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:canonical:ubuntu_linux:9.10	Version:	5
Platform(s):	Ubuntu 9.10	Product(s):
Definition Synopsis:
Ubuntu 9.10 is installed
Referenced By:
oval:org.mitre.oval:def:13529

Definition Id: oval:org.mitre.oval:def:13250

Oval ID:	oval:org.mitre.oval:def:13250
Title:	Ubuntu 8.04 is installed
Description:	Ubuntu 8.04 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:ubuntu:ubuntu_linux:8.04	Version:	3
Platform(s):	Ubuntu 8.04	Product(s):
Definition Synopsis:
Ubuntu 8.04 is installed
Referenced By:
oval:org.mitre.oval:def:13529

Definition Id: oval:org.mitre.oval:def:13319

Oval ID:	oval:org.mitre.oval:def:13319
Title:	Ubuntu 6.06 is installed
Description:	Ubuntu 6.06 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:ubuntu:ubuntu_linux:6.06	Version:	3
Platform(s):	Ubuntu 6.06	Product(s):
Definition Synopsis:
Ubuntu 6.06 is installed
Referenced By:
oval:org.mitre.oval:def:13529

Definition Id: oval:org.mitre.oval:def:12669

Oval ID:	oval:org.mitre.oval:def:12669
Title:	Ubuntu 9.04 is installed
Description:	Ubuntu 9.04 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:canonical:ubuntu_linux:9.04	Version:	5
Platform(s):	Ubuntu 9.04	Product(s):
Definition Synopsis:
Ubuntu 9.04 is installed
Referenced By:
oval:org.mitre.oval:def:13529

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0610s

Facebook rss twitter linkedin mail